Bug with Sub-accounts

[cenourinha]

I found a bug affecting sub-accounts. If the client with the user id "1234" activates 2FA, when someone with the sub-account id "1234" tries to login, it will be requested to pass the 2FA.

[dionysius]

The addon currently only keeps track of the client_id. Looks like whmcs sets the client_id even when using subaccounts.

Further thinking (general question and discussion):

• Should subaccounts be forced to also use 2FA?
  ** Needs implementation to keep track of the "owners" 2FA settings. But in my opinion, it should be enough that everyone secures their own account only.
• How can we see it's a subaccount? (Session variable somwehere?)

[cenourinha]

Subaccounts should have a separated option to use or not 2FA, beside of the primary account options.